The artifact contains substantial application code and tests, and installation has no lifecycle scripts. A missing README makes integration harder, but these positives do not resolve the release's licensing and maintenance exposure.
20%
Total Score
50
50
100
No declared license or license file was detected in the package, leaving reuse and distribution rights unclear for a dependency.
The latest release was in September 2016, with no releases in the last 12 months; this indicates severe abandonment risk despite the package having released twice.
Five runtime dependencies, including payment, SDK, and HTTP components, create a meaningful compatibility surface, though the count alone does not show an unsafe or excessive dependency profile.
The artifact includes tests, which is a small positive, but it has no README, making integration harder for consumers of this library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
omnipay/pin Version ~2.1 | — | — |
guzzlehttp/guzzle Version ~4.0 | — | — |
illuminate/support Version 4.2.* | — | — |
facebook/php-sdk-v4 Version 4.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.